MITRE
CWE Reference
The Common Weakness Enumeration is a community-maintained taxonomy of software weakness types. Every Strata finding maps to a CWE ID where one applies, giving it a stable identifier independent of any single framework's category numbering.
Entries
CWE Reference Reference Entries
4 of 4 entries
CWE
CWE-798CWE-798: Use of Hard-coded Credentials
A weakness where software contains a hardcoded credential (password, key, or token) used for authentication or encryption.
CWE
CWE-1104CWE-1104: Use of Unmaintained Third-Party Components
A weakness from depending on a third-party component that is no longer actively maintained or supported.
CWE
CWE-319CWE-319: Cleartext Transmission of Sensitive Information
A weakness where sensitive data is transmitted in a way that allows it to be read by an unauthorized actor in transit.
CWE
CWE-922CWE-922: Insecure Storage of Sensitive Information
A weakness where sensitive data is stored without sufficient protection against unauthorized access.